Spring 3 MVC and Spring Security